Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa
File:                     7cff44e6-d0f1-3c26-9014-26f5bb427316.roa (raw, json)
Hash identifier:          D6DfZtmw/1YFKn6PS4ysTFbt0A8b8UsaSwwd0qy3Ga4=
Subject key identifier:   41:03:C3:B0:F0:B2:1A:56:A8:05:26:56:C3:13:44:BE:D7:19:B6:FA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849C98E4D17EC4625A2FDE31100
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa
Signing time:             Thu 08 May 2025 17:38:01 +0000
ROA not before:           Thu 08 May 2025 17:38:01 +0000
ROA not after:            Wed 06 Aug 2025 17:38:01 +0000
asID:                     2914
IP address blocks:        173.44.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:8e:4d:17:ec:46:25:a2:fd:e3:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  8 17:38:01 2025 GMT
            Not After : Aug  6 17:38:01 2025 GMT
        Subject: CN=866fca27-7d22-4075-8792-3299d9b3a71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:c1:50:fe:96:68:8d:89:2f:18:26:13:7e:
                    27:25:50:82:4d:82:99:d9:d2:89:d7:5e:e4:80:b8:
                    b2:0c:f5:86:76:77:58:75:ec:88:06:14:7c:3e:21:
                    1c:de:42:d6:a6:58:19:72:40:7f:5a:55:c1:55:01:
                    ce:21:73:cb:a1:e8:82:c3:a3:d8:e6:5e:a9:ec:f8:
                    32:22:ea:ed:f7:21:f9:ae:52:a0:9e:2d:d8:e6:01:
                    dd:6c:62:a5:0b:a8:2d:69:07:9e:c5:e3:59:16:e4:
                    e5:c2:d7:a2:bb:e6:28:f6:e5:4f:03:5c:72:45:6f:
                    79:df:b7:4f:6e:fd:de:e8:d3:4a:83:58:e0:5e:73:
                    2e:f0:00:fa:68:ed:2b:01:db:3f:75:c7:99:63:d3:
                    c5:ca:0f:e8:ed:0d:a6:7f:c7:1d:82:4e:e5:5e:3a:
                    79:e8:eb:58:c7:75:95:6b:21:e8:92:36:1c:39:7a:
                    46:85:b8:71:57:68:2b:ef:95:e5:63:f7:45:e2:2b:
                    7e:2d:e2:8b:b7:2e:10:94:d1:89:f5:43:7b:7f:52:
                    3f:47:c3:30:ba:37:e7:4f:e8:03:2e:e7:01:ef:8c:
                    07:0f:2d:b6:c4:45:25:1b:b7:60:52:65:65:fa:b3:
                    90:c8:87:da:87:61:ff:8e:03:f6:a1:4e:d2:d6:54:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:03:C3:B0:F0:B2:1A:56:A8:05:26:56:C3:13:44:BE:D7:19:B6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:be:69:37:02:29:07:7e:1c:88:b5:ee:87:8e:9c:e5:ab:
         13:c4:c4:07:ba:d3:f7:ac:76:f8:a9:2f:e4:86:d7:4f:de:de:
         58:a5:97:62:b6:26:3e:f0:38:98:00:ab:61:da:5c:b3:e3:9d:
         c7:21:dd:e7:b0:89:fd:96:b6:77:6e:2b:b8:44:23:ec:d8:43:
         91:b0:f8:49:b1:23:7d:f3:64:28:2b:c5:5b:88:42:c6:56:01:
         bd:df:ac:03:b4:0e:91:7d:ad:29:26:1d:c3:0a:1b:71:34:bc:
         a1:bd:cf:2b:48:df:c0:8b:4f:a5:35:9f:23:5c:ff:12:4e:ec:
         12:0d:be:b3:86:7f:55:58:ee:d5:8b:8e:bf:1c:51:65:2a:bb:
         98:13:33:2f:a4:19:2f:7b:9d:91:84:05:ad:3f:55:0a:28:68:
         ec:26:33:ca:3b:df:40:f6:67:12:03:38:19:1a:9d:e6:73:c4:
         dd:cb:1d:c0:f8:5e:55:9f:fd:6f:22:f7:65:06:82:aa:70:13:
         10:18:f3:6b:86:a6:fa:55:20:88:0c:50:da:2c:e4:44:ef:e9:
         8e:d5:65:eb:dd:9f:77:00:26:a9:2c:00:b2:86:44:a0:5a:32:
         3c:03:3e:47:18:bf:db:0e:88:0e:59:e2:fc:00:67:fe:52:14:
         0d:dc:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:27:47 2025 by rpki-client